Feeds

Italian police net 26 in phishing takedown

Phish, Chip and Mules

Top 5 reasons to deploy VMware with Tegile

Italian police have arrested 26 people allegedly involved in an international phishing operation.

The Guardia di Finanza (Military Financial Police) cuffed 18 Italian citizens and eight Eastern Europeans as part of "Phish and Chip", an operation aimed at dismantling a gang targeting users of Poste Italiane's home banking services.

The gang allegedly mounted a spamming campaign directing prospective marks towards overseas websites that mimicked the real Italian Post Office website. Victims were duped into handing over login credentials by bogus emails posing as security alerts.

Laptop computers, data backup kit, false documents, mobile phones, and equipment for creating credit cards were seized by police in the course of the raids that accompanied the arrests. Some of the seized items included Banca Intesa credit cards, said to have been used by the gang at the Casino of San Remo in the days leading up to their detention.

According to a police statement, an unnamed 22-year-old hacker was the linchpin of the scheme. Once account login credentials were obtained, lower ranked members of the gang (phishing mules) emptied funds from compromised accounts, transferring money to PostePay cards activated by members of the gang.

The alleged ringleader is protesting his innocence, maintaining during police questioning that he was one of the good guys - a data processing consultant who helped Italian companies prevent credit card fraud.

Security experts welcomed news of the arrests but warned against any complacency, noting that many cybercriminals remain at large. "Phishing and identity theft are global problems, and countries need to work more closely with each other to bring cybercriminals to justice, on illegal activity like this. Internet criminals can use technology to hide their identities, and it can often be a complex web for the police to untangle," said Graham Cluley, senior technology consultant for Sophos.

"These arrests underline the growing organised nature of international identity theft gangs, but there are many other phishers still at large."

Earlier this month, more than 10,000 web pages based in Italy were attacked by hackers who planted exploit code designed to open up compromised machines to identity theft. It's unclear at this stage whether or not any of the arrested gang were involved in this attack. ®

Internet Security Threat Report 2014

More from The Register

next story
'Kim Kardashian snaps naked selfies with a BLACKBERRY'. *Twitterati gasps*
More alleged private, nude celeb pics appear online
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
UK.gov lobs another fistful of change at SME infosec nightmares
Senior Lib Dem in 'trying to be relevant' shocker. It's only taxpayers' money, after all
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
TOR users become FBI's No.1 hacking target after legal power grab
Be afeared, me hearties, these scoundrels be spying our signals
Snowden, Dotcom, throw bombs into NZ election campaign
Claim of tapped undersea cable refuted by Kiwi PM as Kim claims extradition plot
Freenode IRC users told to change passwords after securo-breach
Miscreants probably got in, you guys know the drill by now
THREE QUARTERS of Android mobes open to web page spy bug
Metasploit module gobbles KitKat SOP slop
BitTorrent's peer-to-peer chat app Bleep goes live as public alpha
A good day for privacy as invisble.im also reveals its approach to untraceable chats
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.